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Squashed entanglement is a measure for the entanglement of bipartite quantum states. 
In this paper we present a lower bound for squashed entanglement in terms of a distance 
to the set of separable states. This implies that squashed entanglement is faithful, that is, it 
is strictly positive if and only if the state is entangled. 

We derive the lower bound on squashed entanglement from a lower bound on the quan- 
tum conditional mutual information which is used to define squashed entanglement. The 
quantum conditional mutual information corresponds to the amount by which strong sub- 
additivity of von Neumann entropy fails to be saturated. Our result therefore sheds light 
on the structure of states that almost satisfy strong subadditivity with equality. The proof is 
based on two recent results from quantum information theory: the operational interpreta- 
tion of the quantum mutual information as the optimal rate for state redistribution and the 
interpretation of the regularised relative entropy of entanglement as an error exponent in 
hypothesis testing. 

The distance to the set of separable states is measured in terms of the one-way LOCC 
norm, an operationally motivated norm giving the optimal probability of distinguishing 
two bipartite quantum states, each shared by two parties, using any protocol formed by 
local quantum operations and one-directional classical communication between the parties. 
A similar result for the Frobenius or Euclidean norm follows as an immediate consequence. 

The result has two applications in complexity theory. The first application is a 
quasipolynomial-time algorithm solving the weak membership problem for the set of sep- 
arable states in one-way LOCC or Euclidean norm. The second application concerns quan- 
tum Merlin- Arthur games. Here we show that multiple provers are not more powerful 
than a single prover when the verifier is restricted to one-way LOCC operations thereby 
providing a new characterisation of the complexity class QMA. 
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I. INTRODUCTION 

The correlations of a bipartite quantum state pab can be measured by the quantum mutual 
information 

I(A;B) p :=H(A) p + H(B) p -H(AB) p , (1) 

where H(X) p := — tr(px log px) is the von Neumann entropy. Subadditivity of entropy implies 
that mutual information is always positive. If || * || 1 is the trace norm, defined as ||X||i = tr VX^X, 
the inequality 

1 , ll2 
I(A;B) p >^-^\\p AB - PA (g>p B \\ v (2) 

follows from Pinsker's inequality [1] for the relative entropy. Thus a bipartite state has zero mu- 
tual information if - and only if - it has no correlations (i.e. it is a product state). 

Conditional mutual information, in turn, measures the correlations of two quantum systems 
relative to a third. Given a tripartite state pabe, it is defined as 

I(A; B\E) p := H(AE) p + H(BE) p - H(ABE) p - H{E) p . (3) 

This measure is also always non-negative, as a consequence of the celebrated strong subadditivity 
inequality for the von Neumann entropy proved by Lieb and Ruskai [2j. 

As for mutual information, one can ask which states have zero conditional mutual information. 
Such a characterization was given in Ref. [3]. A state pabe has I(A; B\E) p = if and only if it is a 
so-called quantum Markov chain, i.e. there is a decomposition of the E system vector space 

H E = @n e L®H e a (4) 
j 

into a direct sum of tensor products such that 



PABE = JZPjPAe L ® PBe R > 
* — » j j 

j 



(5) 
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with states p Ae L on Ha ® H e L, PB e R on ^-b ® H e R and probabilities pj. One might ask: Is there 
an inequality analogous to Q for the conditional mutual information? Here one could expect the 
minimum distance to quantum Markov chain states to play the role of the distance to the tensor 
product of the reductions in §2§. Up to now, however, only negative results were obtained in this 
direction 01 . 

Note, in particular, that the AB reduction of any state of the form ^ is separable [5J, i.e. 

PAB = S.PjPAj ® PB,j- (6) 
3 

Rather than finding a lower bound in terms of a distance to Markov chain states, our main result, 
the theorem in Section [TTJ is a lower bound, similar to the one in in terms of a distance to 
separable states. 

The fact that states pabe with zero conditional mutual information are such that pa-.b is sepa- 
rable motivated the introduction of the entanglement measure squashed entanglement [6J, 1 defined 

as 

E sq {pA:B) = inf I B\E) p : p A BE is an extension of /?ab j • (7) 

This measure is known to be an upper bound both for distillable entanglement and distillable key 
||6j[9j [TO]. It satisfies several useful properties such as monotonicity under local operations and 
classical communication (LOCC), additivity on tensor products [6 J, and monogamy fTT| . 

A central open question in entanglement theory, posed already in [6], is whether squashed 
entanglement is a faithful entanglement measure, i.e. whether it vanishes if and only if the state 
is separable. On the one hand, an entangled state with zero squashed entanglement would imply 
the existence of bound key, i.e. of an entangled state from which no secret key can be extracted. 
Analogously, a state with a non-positive partial transpose (NPT) l|T2l[T3l and vanishing squashed 
entanglement would show there are NPT-bound entangled states [141 [TBI. Both of these are core 
unresolved problems in quantum information theory. On the other hand, if squashed entangle- 
ment turned out to be positive on every entangled state, then we would have the first example of 
an entanglement measure which is faithful, LOCC monotone and which satisfies the monogamy 
inequality |Tl6ll , three properties usually attributed to entanglement but which are not known to 
be compatible with each other. 

The lower bound on conditional mutual information obtained in this paper resolves this ques- 
tion by showing that squashed entanglement is strictly positive on every entangled state. Besides 
its impact on entanglement theory, this result has a number of unexpected consequences for sep- 
arability testing, quantum data hiding and quantum complexity theory. In the following section 
we will present the results of this work in detail, before proceeding to the proofs in subsequent 
sections. 

II. RESULTS 

A lower bound on conditional mutual information: Our main result is an approximate version of 
the fact that states pabe with zero conditional mutual information I (A; B\E) are such that pa-.b 



1 The functional (without the factor |) has also been considered in |7][8]. 
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is separable: We show that if a tripartite state has small conditional mutual information, its AB 
reduction is close to a separable state. 

The appropriate distance measure on quantum states turns out to be crucial for a fruitful for- 
mulation of the result and its consequences. By analogy with the definition of the trace norm 
as the optimal probability of distinguishing two quantum states, our main results involve norms 
that quantify the distinguishability of quantum states under measurements that are restricted by 
locality. Specifically, given two bipartite equiprobable states pa-.b and oa-.b, define the distance 2 
||p — <r|| LOCC _> = 4(-P S ucc — \), where Psucc > \ is the probability of correctly distinguishing the 
states, maximised over all decision procedures that can be implemented using only local opera- 
tions and one-way classical communication, with forward classical communication from A to B 
HZj. When this distance is small, the states p and a will roughly behave "in the same way" when 
used in any one-way LOCC protocol. Writing the distance from a state pab to the set Sa-.b of 
separable states on A : B as 

Wpab ~ Sa-.b\\= min \pab - <*\, (8) 

we may state our main result. 3 

Theorem. For every tripartite finite-dimensional state pabe, 

I(A;B\E) p > ^- 2 \\pab-S A :b\\1 occ ^, (9) 

Interestingly, a similar statement is true when replacing the LOCC norm with the Frobenius 
norm, since there is the dimension-independent lower bound |T7) 

(10) 




where \\X\\ 2 = VtrX^X. The Frobenius norm is also known as Euclidean norm since it measures 
the Euclidean distance between quantum states when interpreted as elements of the real vector 
space of Hermitian matrices. Note, however, that the theorem fails dramatically if we replace the 
LOCC^ norm by the trace norm, a counterexample being a tripartite extension of the antisymmet- 
ric state 4 constructed in |10|. 5 On the other hand, the theorem readily implies a lower bound for 
the trace norm with a dimension-dependent factor. This is because of ( flO) and the well-known 
relation between the trace norm and the Frobenius norm 

n>—r^=\\XL, (11) 

where \A\ denotes the dimension of system A and \\Xh = tr V X^X. 

A lower bound for squashed entanglement: Combining the Theorem with the definition of 
squashed entanglement we find the following corollary. 



2 This definition extends to a norm for the operators on AB, see j3l) . 

3 In a previous version of this paper a similar bound on the conditional mutual information had been claimed in terms 
of the LOCC distance, with no restriction on the classical communication used. However the statement was based 
on a flawed recursion argument for going from the one-way LOCC norm to the full LOCC norm. Thus we leave the 
question of whether one can strengthen the bound to the LOCC norm as an open question. 

4 The antisymmetric state is a particular Werner state defined as ujab ■— j^-i) ' w ^ ^ tne n *P' or swap, operator. 

5 Indeed, Ref. |10| presents an extension luabe oiujAB such that I(A; B\E) U < rafzf / while a simple calculation gives 
that ujab is \ away from any separable state in trace-distance. 



5 



Measure 


E sq m 


£d 118191 


K D 120 , 21 j 


£ c |[l8,22J 


£ F 120 




[24J 




normalisation 


y 


y 


y 


y 


y 


y 


y 


y 


faithfulness 


y Cor. 1 


nm 




y mm 


y 


y 


yG3 


n 


LOCC monotonicity 


y 


y 


y 


y 


y 


y 


y 


yM 


asymptotic continuity 


yEU 


7 


? 


7 


y 




yi 




convexity 


y 


7 


7 


7 


y 


y 




n 


strong superadditivity 


y 


y 


y 


7 


n[32,33J 


n [34J 


7 


7 


subadditivity 


y 


7 


7 


y 


y 


y 


y 


y 


monogamy 


yim 


7 


7 


nnni 


nEOl 


n [10| 


n [10| 


7 



"More precisely, we consider "weak" LOCC monotonicity, i.e. monotonicity without averages. 

TABLE I: If no citation is given, the property either follows directly from the definition or was derived by 
the authors of the main reference. Many recent results listed in this table have significance beyond the study 
of entanglement measures, such as Hastings's counterexample to the additivity conjecture of the minimum 
output entropy j33J which implies that entanglement of formation is not strongly superadditive |32j . 



Corollary 1. For every state pab, 

1 2 
E sq {pA:B) > ^^j\\PAB ~ S A:B\\ L0CC ^- (12) 

Because || * || L occ^ ^ s a norm / this implies that squashed entanglement is faithful, i.e. that it 
is strictly positive on every entangled state. This property had been conjectured in [6] and its 
resolution here settles the last major open question regarding squashed entanglement. Squashed 
entanglement is the entanglement measure which - among all known entanglement measures 
- satisfies most properties that have been proposed as useful for an entanglement measure. A 
comparison of different entanglement measures is provided in Table [Tj 

Squashed entanglement is the quantum analogue of the intrinsic information, which is defined 

as 

I(X;YIZ) := inf I(X;Y\Z), (13) 
p z\z 

for a triple of random variables X, Y, Z j[35l| . The minimisation extends over all conditional prob- 
ability distributions mapping Z to Z. It has been shown that the minimisation can be restricted 
to random variables Z with size \Z\ = |Z||36|. This implies that the minimum is achieved and in 
particular that the intrinsic information only vanishes if there exists a channel Z — > Z such that 
I(X; Y\Z) = 0. Whereas our work does not allow us to derive a dimension bound on the system 
E in the minimisation of squashed entanglement and hence conclude that the minimisation is 
achieved in general, we can assert such a bound if squashed entanglement vanishes: Corollary 
[l] implies that squashed entanglement vanishes only for separable pab- By Caratheodory's theo- 
rem, the number of terms in the separable decomposition of J2iPiPA,i ® PB,i can be bounded by 
|^4i?| 2 , and thus pabe = J2iPiPA,i ® PB,i <8> has vanishing conditional mutual information 

with E = |Ai?| 2 . Equivalently, there exists a channel applied to a purification of pab resulting in 
Pabe such that I(A; B\E) P vanishes. 

Positive rate in state redistribution: Quantum conditional mutual information can be given an 
operational interpretation in the context of the state redistribution problem ||37l |38| . Suppose a 
sender and a receiver share a quantum state | i^)abee' and the sender (who initially holds subsys- 
tems BE) wants to send B to the receiver (who initially holds E'), while preserving the purity of 
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the global state. The purifying subsystem A is unavailable to both of them. Given free entangle- 
ment between the sender and receiver, the minimum achievable rate of quantum communication 
needed to send B, with vanishing error in the limit of a large number of copies of the state, is given 
by \l{A\ B\E)^ |37ll38| . Then from an optimal protocol for state redistribution we find E scl (pa-b) 
to be the minimum rate of quantum communication needed to send the B system, optimised over 
all possible ways of distributing the side-information among E and E' |39| . 

One can ask: Is a positive rate of quantum communication always required in order to re- 
distribute a system entangled with another (irrespective of the side information available to the 
sender and receiver)? Corollary [l] allows us to answer this question in the affirmative. The need 
of a positive rate in state redistribution can then be seen as a new distinctive feature of quantum 
correlations. 

The quantum de Finetti theorem, the LOCC norm and data-hiding states: We say a bipartite 
state pa-.b is ^-extendible if there is a state pA-.B!,...,B k that is permutation-symmetric in the B 
systems with pa-.b = ^B 2 ,...,B k {pA-Bi,...,B k )- Such a family of states provides a sequence of approx- 
imations to the set of separable states. A state is separable if, and only if, it is ^-extendible for 
every k H0H55I . 

Indeed, quantum versions of the de Finetti theorem B4l |45| show that any fc-extendible state 
Pa-.b is such that 

n ii MB\ 2 

\\PAB ~ •SA:b\\ 1 < ( 14 ) 

Moreover, this bound is close to tight, as there are ^-extendible states that are f!,(\B\k~ 1 )-away 
from the set of separable states |45| . 

Unfortunately, for many applications this error estimate - exponentially large in the number of 
qubits of the state - is too big to be useful. Our next result shows that a significant improvement 
is possible if we are willing to relax our notion of distance of two quantum states. It shows that in 
one-way LOCC norm we can obtain an error term that grows as the square root of the number of 
qubits of the A system: 

Corollary 2. Let pa-.b be k-extendible. Then 



c ii - / 16 In 2 log |^1| 
\PAB ~ Sa-.b\\ locc ^ < y £ • (15) 

The key point in the proof of Corollary [2] is the fact that squashed entanglement satisfies the 
so-called monogamy inequality |JlT|. namely 

EsqipA-.B^) > £sq(pA:Bi) + E sq (p A :B 2 ), (16) 

for every state pab l b 2 - This, together with the bound E S(1 (pa-.b) < log |A| [6| implies that the 
squashed entanglement of any fc-extendible state must be smaller than k^ 1 log \ A\, which com- 
bined with Corollary [I] gives Corollary|2] 

We do not know if the bound given in Corollary [2] is tight. An indication, however, is given by 
the following example, which shows that for all k there is a ^-extendible state pab with log | A\ = k 

and || pab - 5 A:b|| locc ^ > 1. 

Example [Lower bound] Consider systems A = A1A2 • • • A^ and B = B'B" and define 

PAB ■■=tTB 2 -B k {PAB 1 B 2 -B k ) (17) 
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where 

PA 1 ...A k :B' 1 B'{-B' k B'i ■ = ^A v -A k ® Sym B , B „ ^ B „ (<£%Bi ® |l)(l|fli' ® ' ' ' ® *A fc fl£ ® I^K^') > 

(18) 

where $ := |$)($| is the projector onto an EPRpair |$) := (|0)|0) + |l)|l))/\/2, Id is the identity 
superoperator and Sym Bi Bfc is the symmetrization superoperator defined as 

Sym Bi A (X) :=l£ (19) 

with S'fc the symmetric group of order A; and the representation of the permutation it which 
acts on a /c-partite vector space as P % \h) ® ... <S> |ijfe) = |^ 7r - 1 (i)) ® ••• 8) \l^-i(u\). The state /o^s takes 
the form 

1 fc 

PAB = r^2®A l B'®\l){l\B"®T Al ... Al _ lAl+1 ... Ak , (20) 

Z=l 

with tc '■= I/I C| by construction fc-extendible. Moreover we can deterministically obtain an EPR 
pair from p A B by the following simple one-way LOCC protocol: Bob measures the B" register in 
the computational basis and tells Alice the outcome I obtained. Then she traces out all her systems 
except the l-th. Thus the one-way LOCC distance of p A B to separable states is at least the one-way 
LOCC distance of an EPR pair to separable states, which is known to be one |46|, and so 

\\pAB-Sa:b\\ L0CC ^ >0(1). (21) 

□ 

A direct implication of Corollary [2] concerns data-hiding states |47l - l50l . Every state p A s that 
can be well-distinguished from separable states by a global measurement, yet is almost completely 
indistinguishable from a separable state by LOCC measurements is a so-called data-hiding state: 
it can be used to hide a bit of information (of whether the state prepared is p A B or its closest 
separable state in LOCC norm) that is not accessible by LOCC operations alone. The antisymmet- 
ric state of sufficiently high dimension is an example of a data hiding state |49|, as are random 
mixed states with high probability [50J (given an appropriate choice of the dimensions and the 
rank of the state). Corollary [2] shows that highly extendible states that are far away in trace norm 
from the set of separable states must necessarily be data-hiding (at least under one-way LOCC 
measurements) . 

A quasipolynomial-time algorithm for separability of quantum states: Given a density matrix 
describing a bipartite quantum state p A -.B, the separability problem consists of determining if the 
state is entangled or separable. This is one of the most basic questions in quantum information 
theory and has been a topic of active research in the past years (see e.g. IIT51I ). 

In the weak-membership problem for separability one should decide if a given bipartite state 
p A -B is in the interior of the set of separable states or e-away from any separable state (in trace 
norm), given the promise that one of the two alternatives holds true. The best known algorithms 
for the problem have worst case complexity 2P ol y(l^l>l B l) l°s(i/<0 ( see e .g. ||5Tti54| ). In fact, the prob- 
lem is NP-hard for e = 1/ poly (n) I55H57I. 

Let S a -b be the convex set of separable states acting on A B. Corollary|2]implies that for the 
one-way LOCC-norm version of the weak-membership problem for separability, one can greatly 
improve upon the previous known algorithms. 
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Corollary 3. There is a quasipolynomial-time algorithm for solving the weak membership problem 
for separability in the one-way LOCC norm and the Euclidean norm. More precisely, there is an 
exp(0(e~ 2 log \A\ log \B\))-time algorithm for deciding WsEp(e, || * Hlocc) an d WsEp(e, II * Ik)- 

It is intriguing that the complexity of our algorithm matches the best hardness result for the 
trace-norm version of the problem Il58l . It is an open question if a similar hardness result could be 
obtained for the one-way LOCC norm case, which would imply that our algorithm is essentially 
optimal. 



The algorithm, which we analyse in more detail in Section IV is very simple and in fact is 
the basis of a well-known hierarchy of efficient tests for separability |5Tf . Using semidefinite- 
programming one looks for a 0(log |^4|e~ 2 )-extension of pa-.b and decides that the state is separa- 
ble if one is found. If the state is separable, then clearly there is such an extension. If it is e-away 
from any separable state, Corollary^ shows that no such extension exists. 6 

More detailed information on this algorithm as well as the related problem of optimising a 
linear function over separable states, relevant for instance in mean-field theory, is given in [59 1. 

Quantum Merlin-Arthur games with multiple Merlins: A final application of the Theorem con- 
cerns quantum Merlin-Arthur games. The class QM A can be considered the quantum analogue of 
N P and is formed by all languages that can be decided in quantum polynomial-time by a verifier 
who is given a quantum system of polynomially many qubits as a proof (see e.g. |60|). It is natural 
to ask how robust this definition is. A few results are known in this direction: For example, it is 
possible to amplify the soundness and completeness parameters to exponential accuracy, even 
without enlarging the proof size [61 J . Also, the class does not change if we allow a first round of 
logarithmic-sized quantum communication from the verifier to the prover [|62| . 

From Corollary [2] we get a new characterisation of QMA, which at first sight might appear to 
be strictly more powerful: We show QMA to be equal to the class of languages that can be decided 
in polynomial time by a verifier who is given a constant number k of unentangled proofs and 
can measure them using any quantum polynomial-time implementable one-way LOCC protocol 
(among the k proofs). We hope this characterisation of QMA shows useful in devising new QMA 
verifying protocols. 

In order to formalise our result we consider the classes QMAm (£;)m,s,c/ defined in analogy to 
QMA as follows 1551 



Definition. A language L is in QM Am (&) m)SjC if for every input x e {0, l} n there exists a poly-time 
implementable two outcome measurement {M X ,I — M x } from the class M such that 

• Completeness: If x G L, there exist k witnesses \i>k)> ea ch ofm qubits, such that 

tr (A x GViX^il ® - ® l^fcX^fcl)) > c (22) 

• Soundness: If x L, then for any states \ipk) 

trCAcdV'iX^il®-®^*)^*!))^* ( 23 ) 
We call QMA M (fc) = QMA M (A0p Oly(n)i2 /3,i/3- 



6 In I5H one imposed the further constraint that the symmetric-extension has to have a positive partial transpose with 
respect to all B systems. It is an interesting open question if the worst-case complexity of the algorithm (in the 
one-way LOCC-norm case) can be further improved taking into consideration this extra constraint. 
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Let M = SEPyes be the class of (non-normalised) separable POVM elements. 7 Then Harrow 
and Montanaro showed that QMA SEPyes (2) = QMA(2) = QMA(fc) for any k = poly(n) [58], i-e. two 
proofs are just as powerful as k proofs and one can restrict the verifier's action to SEPyes without 
changing the expressive power of the class. 

We define QMA|_occ-^(^) i n an analogous way but now the verifier can only measure the k 
proofs with a one-way LOCC measurement, with forward classical communication. Then we 
have, 

Corollary 4. For k = 0(1), 

QMA L occ-(^) = QMA. (24) 

In particular, 

QMAlqcc- (2)m, s>c C QMA 0(m2e - 2)jS+e)C . (25) 

A preliminary result in the direction of Corollary|4]appeared in |65l , where a similar result was 
shown for QMAlo(A;), a variant of QMA(fc) in which the verifier is restricted to implement only 
local measurements on the k proofs and jointly post-process the outcomes classically. 8 

It is an open question whether ( |25| remains true if we consider QMA(2) instead of 
QMAlocc^ (2). If this turns out to be the case, then it would imply an optimal conversion of 
QMA(2) into QMA in what concerns the proof length (under a plausible complexity-theoretic as- 
sumption). For it follows from [58J (based on the QMA(poly log(n) v / ^)i g(n), 1,1/3 protocol for 3- 
SAT of (Ml) that unless there is a subexponential-time quantum algorithm for 3-SAT, then there 
is a constant eo > such that for every 5 > 0, 

QMA(2) m , s , c g QMA 0(m2 _ ae - 2) s+eo c . (26) 

Another open question is whether a similar result holds for QMAlocc^ (2). This would be the case 
if one could construct a one-way LOCC version of the productness test of Harrow and Montanaro 

ESQ. 

An interesting approach to the QM A(2) vs. QMA question concerns the existence of disentangler 
superoperators 11641 , defined as follows. 

Definition. A superoperator A : S — > AB is a (log e, 5)-disentangler in the \\ * \\ norm if 

• A(p) is e-close to a separable state for every p, and 

• for every separable state a, there is a p such that A(p) is 5-close to a. 

As noted in [64|, the existence of an efficiently implementable (poly(log \A\, log \B\), e, 8)- 
disentangler in trace norm (for sufficiently small e and 5) would imply QMA(2) = QMA. Watrous 
has conjectured that this is not the case and that for every e, 5 < 1, any (e, <5)-disentangler (in 
trace-norm) requires \S\ = 2 Q ( mm ^ A \'\ B ^\ For an exponentially large in turn, Matsumoto pre- 
sented a construction of a quantum disentangler [66 1 and the quantum de Finetti theorem gives 
an alternative construction |45| . Corollary [2] can be rephrased as saying that there is an efficient 
disentangler in LOCC norm. 



7 POVM elements A from this class form two-outcome POVMs {^1, 1 — ^4} known as separable-once-remove, meaning 
that they are separable measurements once one of the effects is removed. Here we use the notation SEPyes to denote 
that the POVM element associated to accept should be be separable, i.e. proportional to a separable state. 

8 QMA L0 (fc) is a l so called BellQMA(fc) |64| since the verifier is basically restricted to perform a Bell test on the proofs. 
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Corollary 5. Let k = [8 In 2 log \A\e 2 ] and S := AB\ ■ ■ ■ B^. Define the superoperator A : S — > AB, 
with \B\ = \Bj\for all j < k,as 

1 k 

i=l 

Then A is a (0(log \A\ log |i?|e -2 ), e, 0)-disentangler in one-way LOCC norm. 

For more applications of this work to quantum Merlin-Arthur games, see [59[. 

Distinguishability under locality-restricted measurements. We will now give a formal definition 
of the norm || * IIlocc— that was used in order to state the results. || * IIlocc— can be seen as a 
restricted version of the trace norm || * \\ v Introducing the set ALL as consisting of all operators M 
that satisfy < M < I, the trace norm can be written as 

\\Xh = max tr((2Af-M0, (28) 

A/eALL 

where I is the identity matrix. The trace norm is of special importance in quantum information 
theory as it is directly related to the optimal probability for distinguishing two equiprobable states 
p and o with a quantum measurement. 9 In analogy with this interpretation of the trace norm, and 
for operators X on the tensor product space AB, we define the one-way LOCC norm as 

IIXII, ore- : = max tr((2M - l)X), (29) 

where LOCC^ is the convex set of matrices < M < I such that there is a two-outcome mea- 
surement {M, I — M} that can be realized by one-way LOCC between Alice and Bob [17]. It will 
become clear below why this defines a norm. The optimal bias in distinguishing p and a by any 
one-way LOCC protocol is then \ \p — oIIlocc-^- 

The introduced norm fits into a general framework [17J for restricted norms where one con- 
siders M, a closed, convex subset of the operator interval 

{M : < M < 1} = {M : M > 0, {M^ < 1} (30) 

containing I, having nonempty interior, and such that M G M implies I-Me M. Then 

||X|| M = max tr ((2M - l)X) =maxtr(yX), (31) 

where 

D = conv(M U -M) = {2M -I:MeM} = {7: \\Y\\* M < 1} 
is the unit ball for the dual norm || • || ^ . 

Relating entanglement measures: The core of the proof of the Theorem is composed of three 
steps, Lemmas [lj |2j and [3] below, each of which is a new result about entanglement measures. 
They ca be straightforwardly combined to prove the Theorem. 



9 Two-outcome measurements suffice for such tasks, and these are described by a pair of positive semidefinite matrices 
summing to I, which we write {M, I— M} . When the state is p, the probabilities of the outcomes are Pr(M) = tr(Mp) 
and Pr(I — M) = tr((I — M)p) = 1 — Pr(M). The optimal bias of distinguishing two states p and a is then given by 

max < Af <itr(M(p - a)) = 
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A measure that plays a fundamental role in the proof is the regularised relative entropy of 
entanglement (2411341, defined as 

EgipA*) := lim ^IM, (32) 

n— >ao n 

with the relative entropy of entanglement given by 

Er(pa-.b) ■= mm S(pab\Wab), (33) 

where the quantum relative entropy is given by S(p\\a) = tr(/?(logp — log a)) if supp p C supp a 
and S(p\ | a) = oo otherwise. A distinctive property of the relative entropy of entanglement among 
entanglement measures is the fact that it is not lockable, i.e. by discarding a small part of the state, 
Er can only drop by an amount proportional to the number of qubits traced out. Indeed, as 
shown in [67 1, one has 

Er(pa:Be) < E r { P a:e) + 2H(B) P . (34) 

While the same is true for E^, we use an optimal protocol for state redistribution [37. 38 j to obtain 
the following improvement of Eq. (|34|, which is valid only for the regularised quantity. 



Lemma 1. Let pabe be a quantum state. Then, 

I{A;B\E) p > E%( PA :be)-E%(pa:e). (35) 

The second step in the proof is to obtain a lower bound on E r °(pa-be) — Er(pa:e), which by 
Lemma [ljalso gives a lower bound on the conditional mutual information. If we could prove that 
E^ satisfied the monogamy inequality given by fll?^ , we would be done, since Ref. |68| shows 
that 

Er(PA:b) > ^[j\\P^B ~ S A-B\\\_ 0CC - (36) 

However, the antisymmetric state is a counterexample llTOl . Nonetheless, we will show that the 
regularised relative entropy of entanglement satisfies a weaker form of the monogamy inequality, 
and this will suffice to us. 

In order to state the new inequality, we have to recall an operational interpretation of E^ in 



the context of quantum hypothesis testing l|27| (see Section III B for more details). Suppose Alice 
and Bob are given either n copies of an entangled state pa-.b, or an arbitrary separable state in the 
cut A n : B n . Suppose further they can only measure a POVM from the class M in order to find out 
which of the two hypotheses is the case. Let p e (n) be the probability that Alice and Bob mistake 
a separable state for the n copies of pa-.b, minimised over all possible measurements available to 
them. 10 Then we define the optimal rate function Dm {pa-.b) as follows 

D M {pA:B) = hm . (37) 

n— >oo n 

The main result of Ref. (27) implies 

Da LL (pa:b) = E%( P a-.b), (38) 
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We also require that the measurement only mistakes p® n B for a separable state with a small probability. See Section 



III B for details. 
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i.e. the regularised relative entropy of entanglement is the optimal distinguishability rate when 
trying to distinguish many copies of an entangled state from (arbitrary) separable states, in the 
case where there is no restrictions on the measurements available. 

The new monogamy-like inequality we prove for E^, using the connection of E^ with hy- 
pothesis testing given by Eq. ((38]), is the following: 



Lemma 2. For every state pa.be, 

E% '{pa.be) - E%(pa:e) > D locc ^(pa:b). (39) 

The third and final step is to obtain a lower bound for .Dlocc^ in terms of the minimum 
LOCC^ distance to the set of separable states. We prove a slightly more general result. Then we 
have 



Lemma 3. For any M e {LOCC^, LOCC% LOCC, SEP} and every state pa-b 

1 II <? I' 2 

II ft A, D — t> /t . D I 

8 In 2 



Du{PA.b) > -^r^\\PA:B -<Sa:b|| m - (40) 



In Il68l a similar result was proved: consider the following modification of the relative entropy 
of entanglement: 

E RM (p) := minmaxS(M(p)||M(a)), (41) 
o-eS MeM 

with M(X) := Y, k tx(M k X)\k){k\ for a POVM M := {M k } k £ M. Then for any class of measure- 
ments M G {LOCC^,LOCC^, LOCC, SEP} it was shown that iU 

1 2 
Er, M {PA:b) > ^]^\\PA:B -<SA:b|| m - (42) 

It is conceivable that 

E% m (pa:b) = D m ( P a:b), (43) 
and if this was the case we could obtain Lemma [3] from Eq. |42| , since Er^m is superadditive. 



Indeed, for M = ALL, Eq. 43 holds true and this is precisely the content of Eq. ( |38] |. For restricted 
classes of POVMs, however, it is not known whether Eq. ( |43| remains valid and, alas, the tech- 
niques of [27] do not appear to be directly applicable. We note that one direction is easily seen to 
hold, namely 11 

E% M (pA:B)>D M (pA:B). (44) 

So we can obtain an asymptotic version of Eq. (42 1 from Lemma [3] 



A new construction of entanglement witnesses: In the proof of Lemma [3] we derive a relation 
that might be of independent interest. For any restricted set of POVMs M, 

2 max ( tr(Mp) - max tr (Ma) ) = \\p AB - S A :b\L- (45) 



MeM V ' ' °-eS ' 11 ' 



The POVM element maximising the left hand side is a so-called entanglement witness |Tl5l[7T| : its 
expectation value on the entangled state p is bigger than its expectation value on any separable 



state. Therefore it can be used as a witness to attest the entanglement of pab- ( |45| ) gives a new 
construction of entanglement witnesses that is attractive in the following respects: 



The proof is very similar to the usual argument, which shows 5(p||cr) to be an upper bound on the optimal distin- 
guishability rate in quantum hypothesis testing (see e.g. 1 69 70 1), and thus we omit it. 
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Pa-.be 



entanglement in 
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D' 
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'A n :E n FG 



A' 



G 



5 



Decode 



ITT 



E u p - F > B n 

entanglement out 



FIG. 1: General protocol for redistributing the B parts of a pure state IV^abbb' wnere the sender holds E 
and the receiver holds E' . The protocol consumes maximal entanglement on DD', transmits the quantum 
system G, and produces maximal entanglement on FF' . The dimensions of D, F and G typically depend 
exponentially on n. The protocol is asymptotically reversible. 



• The witness is a POVM element and thus can be measured with a single measurement set- 
ting. 

• Every M that (after rescaling) contains an informationally complete POVM can be used to 
construct witnesses detecting every entangled state. 

• The maximum gap in expectation value for an entangled state versus separable states, opti- 
mised over all witnesses from a class M, is equal to the minimum distance of the entangled 
state to the set of separable states in the M norm and thus can also be used to quantify the 
entanglement of the state (see |72ll73l for related results in this direction). 



III. PROOF OF THEOREM 



A. Proof of Lemma[T] 



The main idea in the proof of Lemma [T] is to apply the nonlockability of Er given by |34| to a 
tensor power state p^ n BE , but to use an optimal protocol for performing state redistribution pro- 
tocol to trace out B in a more efficient way. A general protocol for state redistribution is outlined 
in Figure [Tj The following proposition follows immediately from the existence of a redistribution 
protocol achieving the minimum possible rates of communication and entanglement cost: 

Proposition 1 ( ||37ll38l ). There is a sequence of asymptotically reversible encoding maps A n : B n E n D — > 
E n FG such that if '4>a™-.e™fg = K(pTbe ® t d) ( see Fi g-0' then 

l ^W^ll(A;B\E) p , (46) 
n 
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and 

where to and Tp are the maximally mixed states on systems D and F, respectively. 
Proof of Lemma |lj 

E%(pa-.be) = lim -Er(<I>a»:e*fg) (48) 

n— >oo n 

< ( lim -E R {4> An:EnF )\ + I(A;B\E) (49) 

= ( lim -E R (p% r F )) + 1(4; B|E) (50) 
= ^(p^)+/(A ;J B|B). (51) 

The first line holds by asymptotic continuity of E B [30, 74] and the asymptotic reversibility of 
the encoding operation. The second follows from |34| and |46| . The third line holds again by 
continuity of Er, applied to the asymptotic equality (|47| of the respective arguments of E B . □ 

The same argument applied to the mutual information instead of the relative entropy of en- 
tanglement can be used to prove the converse of state redistribution (see Il75l [76| for a similar 
argument in the context of one-shot quantum state splitting). 

B. Proof of Lemma|2] 

Before proceeding to the proof, we give a precise definition of the rate functions Dm. 

Definition. Let p AB be a state and M = {LOCC^, LOCC^, LOCC^, SEP, ALL} a class of POVMs. 
Then we define Dm(pa-.b) as the unique non-negative number such that 

• (Direct part): For every e > there exists a sequence of POVM elements {M A n Bn } n& $, with 
G M, such that 

lim tr(M AnBn p%) = 1 (52) 

n— >oa 

and for every n e N and u A n B n G S A n -.B n , 

log tv(M A n B n ^A n B n 



n 



> D M (p A .. B ) - e. (53) 



(Converse): If a real number e > and a sequence of POVM elements {M A n B n} n&N we such that 
for every n G N and every oo A n gn e S A n- B n, 

\Qg(tl(M A n Bn UJM B n)) 

> D M {p A:B ) + e, (54) 

n 

then 

lim ti(M A n Bn p%) < 1. (55) 



15 



Recall 435): 

Proposition 2 ( p7\ ). For epery sfate PAS/ 

Dm 1 ( P A:b) = E%( P A:b). (56) 

The main application of Proposition [2] so far has been to prove that the asymptotic manip- 
ulation of entanglement under operations that, approximately, do not generate entanglement is 
reversible: both the distillation and a cost functions in this paradigm are equal to the regularised 
relative entropy of entanglement HZZHZH- In fact, one can show that Proposition [2] is equivalent 
to such reversibility under non-entangling operations, in the sense that the latter can be used to 
prove the former [80 1. 

The proof of Lemma [2] will utilise the special structure of LOCC measurements with one-way 
communication: 

Lemma 4. Any operator in LOCC^ necessarily has the form 

J2 M A,k®N B>k , (57) 
k 

where < M A>k < I a, < N B>k and J2 k N Bjh < I B . 

Proof. Any LOCC measurement consisting of communication only from Bob to Alice has the gen- 
eral form {M A , a \b ® N B , b }, where < M A , a \b, < N B , b , E a M A,a\b < ^A and Eb N B,b < Ib- The 
convex hull of such POVM elements consists of all operators of the form given in the lemma. □ 

Proof of Lemma [2] The main idea in this proof is to start with measurements for pA:E and pa.b 
that respectively achieve D *all(p A:e) and D\_qqq^(pa-.b), and to construct a measurement for 
PA-.B E distinguishing it from separable states at a rate given by the sum of the individual rates. 
The lemma then follows from Proposition [2] Here, it is crucial that we only use one-way LOCC 
measurements to discriminate pa-.b from separable states, since only in this case are we able to 
make sure that the composed measurement for pa-.be acts as it should. 

Let 5 > and fix two ^-optimal sequences of POVM elements: an unrestricted sequence Qa™ e™ 
of POVM elements for distinguishing pa-.e from separable states, and a sequence B n of one- 
way LOCC (with classical communication from Bob to Alice) elements for distinguishing pa,b 
from separable states. This means that 

tr {Qa^pTe) ^ 1 and tr (Sa^pTb) -> ( 58 ) 

while 

logtr (Qa^E^^A: E ) 



n 

for every state separable across A n : E n and 

logtr (SA n B n ^ J A n :B n ) 



n 



> D all (pa-.e) ~ S (59) 



>D L0CC ^(pa:b)-S (60) 



for every state ujA n :B n separable across A n : B n . We will use these to construct a sequence of POVM 
elements TA n B n E n that distinguish p A m ' BE from separable states u)A n -.B n E n i satisfying 

lim \,t(T a »b*e«pTbe) = 1 ( 61 ) 
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and 



lim 

n— ¥00 



log tl{T J \ n B n E n ^A n :B n E" 



n 



> Dall(pa-.e) + D LO cc^(pa-.b)- 



(62) 



Because the left-hand-side is a lower bound to the maximal achievable error rate D^\_\_{pa-,be), 
Proposition [2] then gives the desired inequality 

E%(PA:BE) > E%( PA ; E )+D L0 CC^(PA:b)- 

To construct T^n Bn E n, first observe that by Lemma|4j we can write the LOCC^ - operator Sa™ b» 
in the form 



SA n B n = MA'\k ® N B n >k , 



(63) 



with < MA",k < 1/ < N B n k and Yl,k^B n ,k < I- It will be useful to consider a Naimark 
extension of the measurement on B, consisting of orthogonal projections P Bn s k such that 

^B\^B n B,k\^Bl 



N B"BX DeiilXe 



R A™B"B '— ^2 MAn > k ® P B"B,k' 



(64) 



which by construction is such that < R A „ BnB < I. Define 



Ii»B»E» :— (0^ K/ A n B™B QA n E n \/ R 



A n B n B 



'B 



y2 ( \/ M A",k Qa"E™ \jM A ™,k) ® N B 



.k- 



(65) 
(66) 



Note that we omit identity operators from our notation here and in the remainder of this proof. 
There should be no room for confusion, as the global Hilbert space will always be clear, and we 
use superscripts to indicate on which "local systems" each operator acts. For instance, Qa™ e™ = 



QA n E n <8> Ign|} in Eq. d65J, while M^^ = M A n,k ® I E n in Eq. ( 66 1. 



Observe that < Ta^b^e™ < I because the same holds for Qa™e™ and J?, n ™s. We will now 
verify the conditions (|6"T|l and ([62]) required to complete the proof. For proving |6"T] |, we first write 



tx{T MB ^E^pTBE) = tr (QA"E»yjR AnBnS {pTbE ® |0)(0| g ) ^ 



A n B n B 



From(|58]l 



Hence by the gentle measurement lemma |8T 



lim tr (R AnBnB (pT BE ® |0)(0| 5 ) = lim tr(^^p^) = 1- 



lim 

n— >oo 



Pa^be 



IJ V R A n B n B (Pa?BE ® |0)(0| b) \f R A n B n B 

and so ( |67| | and ( p8| give 

lim tv(T A n B n E np® n BE ) > lim tr (q a ™e™ {pTbe ® 



lim 

n— >oo 



f%BES>\°)(°\B-y/- 



R A ^b{pTbe®\0)(0\b)\ R 



A n B n B 



1. 



(67) 



(68) 



(69) 



(70) 
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Let us now prove (62 1. We write 

tl(TA^B n E n ^A n :B n E n ) = tv(QA n E n ^A n :E n )^ (^A n B n B {^A^-.B^E" ® |0) (0|_g) V (71) 

with 



tr B™5 \V^A n B n B ( UJ A:BE ( ^ > |0)(0|g) V^A n B n B . 

:= / n; • (72) 

tr l^ A n B „^ (WA«:B»E" <8> |0)(0|g) 



We claim that separable in the cut A n : E n whenever 

U}A n :B n E n IS separable in the cut 

A n . B n E n Then Q will imply ^2)because 

logtr^Bnpw^^np) log tr w^n ) log tr (S A" B" UA n : B™ ) 
hm = lim h lim 

n— >oo n n— >oo n n—>co n 

> E%(pa:e)+D LO cc^(pa:b)-25, (73) 

where we used Proposition [2] and |59| ) and ( [60| >. 

To show that separable, we now prove that the completely-positive trace-non- 

increasing map A: A n B n E n — >• A n .E n defined as 



ApdnfinE") := tr B „g [y R A«B"B ( X A"B"E™ ® |0)(0|g) jR A n B nB ) ( 74 ) 

is a separable superoperator. From the form of R AnBn g given in (j64j) we can write 

A(Xa»b»e*) := ^tr B „ g [(v^^S* ® P B"B,k) { X A™B™E™ ® |0)(0| 5 ) (V^.fc' ® ^ £ 



fc,fc' 



B n B,k' 



Then, taking the partial trace over _B n .B we find that the cross terms in (75 1 are zero since the 
projectors P B „§ k are mutually orthogonal and therefore 

A(X A nB"E") ■= ^2^ B n B [V M A",k <8> P B nB, k ) ( X A n B n E n ® |0)(0|g) (v^Sfc® P B»B, 

which is manifestly a separable superoperator. This implies that w^^n = A(w J 4n :B n S n) is separa- 
ble, since ooA n -.B n E n is separable. □ 

C. Proof of LemmaH] 

The final step is now to prove Lemma |3j For that we construct a particular protocol for distin- 
guishing many copies of an entangled state from arbitrary separable states, with an exponentially 
small probability of mistaking a separable state for many copies of a particular entangled state. 
In Corollary II.2 of (27|, a similar result was shown using the exponential de Finetti theorem [83 1. 
Here we give a simpler proof with a stronger bound on the distinguishability rate. 

A useful result we will employ is the following simple extension of |84J, which in turn is a 
consequence of the minimax theorem, which we quote below the proof. 

Lemma 5. Let Mbea closed convex set ofPOVM elements and C a closed convex set of states. Then given 

2 max (tr(Mp) -maxtr(Ma) ) = ||p-C|| M (75) 
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Proof. Following Jain [841, let the function u : (M,C) -> R be defined as u{M,a) = tx(Mp) - 
tr(Mcr). The sets M and C are compact convex subsets of the (real) vector space of Hermitian ma- 
trices. Since the function u is furthermore affine in both arguments, the conditions of the minimax 
theorem are satisfied (see Proposition [3] just below) and we find 

2 max ( tv(Mp) - maxtr(Mcr) | = 2 max min (tr(Mp) - tr(Mcr)) (76) 
MeM \ aec J MeM o-ec 

= 2 min max (tr(Mp) - tx(Ma)) (77) 
aec MeM 

= min lip - a\\ M . (78) 

aec 

□ 

Proposition 3. (Minimax theorem) Let C1X2 be non-empty, convex and compact subsets ofW 1 and M. m , 
respectively. Let u : C\ x C 2 — > K be convex in the first argument and concave in the second and continuous 
in both. Then, 

min max it(xi, £2) = max min u(x\,X2). (79) 

xieCi X2SC2 X2£C2a;ieCi 



In the proof of Lemma |3]we will also make use of Azuma's inequality, a large deviation bound 
for correlated random variables. We say a sequence of random variables Xq, X\, X2, ■ ■ ■ is a su- 
permartingale if for all k G N 

E(X k+l \X ,...,X k )<X k . (80) 

Then we have 

Proposition 4. (Azuma's inequality) Let {X k } k be a supermartingale with \X k+ i — X k \ < c k . Then for 
all positive integers n and all positive reals t, 

Pr(X n -X >t)< exp (- f ) . (81) 

\ 1 [luk=l C k) J 

Proof of Lemma HJ By Lemma |5} there is Mab G M such that 

b = a+\\\pAB ~ S A -.b\\ u , where a := max tr (M A b^ab), b := tr {Mab PAb), (82) 

and without loss of generality \\pab — ^A:_b|| m > 0, or b > a. 

The element Ma^b u € M is constructed as follows. Fix 5 > 0. One measures the POVM 
{Mab^ — Mab} m each of the n copies, obtaining n binary random variables {Zj}" =1 , where 
Zi = 1 is associated with effect Mab and Zi = with effect I — Mab- Then if 

1 n 

-VZi >a + {l-5){b-a), (83) 
n ^— ' 

i=l 

we accept (this corresponds to Ma^e™)- Otherwise we reject. 
First, by the law of large numbers it is clear that 

lim tr(M A n B „p®«) = 1. (84) 
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We now show that 



logtr(M J 4«snu; a«_B") . (1 - <5) 2 I, N 2 (Qrx 

hm > pab-«Sab M - (85) 

n 8 In 2 11 



The key observation is that, in case we have a separable state uja" b™, for alH e {1, . . . , n}, 

Pr(Z i = l|Z 1 ,...,Z i _i)<o. (86) 

This is so because by assumption Mab £ SEP implies that both POVM elements in the measure- 
ment {Mab, I— Mab} are separable operators. Therefore, the state to which the k-th measurement 
is applied is always separable, even conditioning on previous measurement outcomes. Then by 
Proposition |4} 



Pr {^fl Z i >a+(l-S)(b-a)\ 



< 2"w n ( b ~ a ) . (87) 



In more detail, define the random variables 

k 



X k := (Zi ~ a) • (88) 

i=i 

Note that 

E(X k \X 1 ,...,X k _ 1 ) = E(Z k \Z 1 ,...,Z k _ 1 )-a + X k -. 1 (89) 

= Pr [Z k = l\Zi,..., Z fc _0 - a + (90) 

< (91) 

i.e. {Xfcjfc form a supermartingale. Moreover, for all k, \X k — X k -i\ = \Z k — a\ < 1. Hence by 
Proposition |4j setting Xq = 0, we have 



Pr ( - J^Zi >a + (l-8)(b-a) | = Pr (X„ > n(l - £)(& - a)) 

V"fl / 



(92) 



< rxpf-^— ^n(6-a) 2 ) (93) 



2 

2-w"( f) - a ) . (94) 
From (|82}, 

" £ lo § ( Pr (^ i >« + (l-#-«)))> ||P^ " ^ :S || 2 M , (95) 



and thus 



Du(l> vd) > %^-\\pab ~ S A .. B f M . (96) 



The result then follows from the fact that S > is arbitrary. □ 
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D. Proof of Theorem 

Proof. The Theorem follows directly from Lemmas 1, 2, and 3. Indeed 

I(A; B\E) p > E%( PA .. BE ) - E%( PA:E ) > D LOC c-(pa:b) > ^Wpa-.b - S A (97) 
where the first, second, and third inequalities follow from Lemmas 1, 2, and 3, respectively. □ 



IV. PROOFS OF COROLLARIES 

We start with the proof of Corollary|2j which is straightforward. 
Proof of Corollary|2j Squashed entanglement satisfies the monogamy inequality ffTTf 

E sq (pA:BB') > E sq (p A -. B ) + E sq (p A ;B>)- (98) 

Repeatedly applying it to pA:B v -B k and noting that E S(l {p A :B x -B k ) < log \A\ 10, we get 

log \A\ > E sq {p A : Bl ...B k ) > kE s(l {pA:B). (99) 

where we used that pab = Pab for all j. The result then follows from the lower bound for 
squashed entanglement given in Corollary [T] □ 

Here, we give an outline of the proof of Corollary |3j concerning the quasipolynomial-time 
algorithm for deciding separability. A more careful treatment can be found in [59|. 

Proof of Corollary|3j Given a density matrix pab, we use semidefinite programming [85] in order 



to search for a 



8 In 2 log | A\ 



-extension of pa-.b- If Pab £ Sa.b, then there is such an extension (since 

separable states have a /c-extension for every k). If \\pab — <^4:s||locc^ — £/ Corollary [2] implies 
that there is no such extension. 

The computational cost of solving a feasibility semidefinite problem with n variables and a 
matrix of dimension m is 0(n 2 m 2 ). A /c-extension of pab has dimension and less than 



iln21og|A| 



c 2 



-extension is of 



|^|2|^|2fc var i aD i eS- Hence the time complexity of searching for a 
order exp (0(e- 2 log|A|log|5|)). □ 

Proof of Corollary|lj We start by proving |25| . Consider a protocol in QMALocc^(2) m ,s,c 
given by the one-way LOCC measurement {Mab,^ — Mab}- We construct a protocol in 
QMA ( m 2 £ -2) >s+e c that can simulate it: The verifier asks for a proof of the form \ip) A Bi-B k where 
\A\ = \Bi\ = 2 m for all i (each register consists of m qubits) and k = [81n2e~ 2 m]. He then 
symmetrises the B systems obtaining the state PAB X -B k and measures {Mab,^ — Mab} in the 
subsystems AB = AB\. 

Let us analyse the completeness and soundness of the protocol. For completeness, the prover 
can send \iP)a <8> |<A)l fe , for states \ip),\4>) such that 

tr\^){i>\ A ®\ct>)^\BM A B>c. (100) 

Thus the completeness parameter of the QMA protocol is at least c. 
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For soundness, we note that by Corollary |2j 

\\pab - 5 A:b|| locc ^ < e. (101) 

Thus, as {Mab, I — Mab} S LOCC the soundness parameter for the QMA protocol can only be e 
away from s. Indeed, for every pAB x -B k symmetric in B, 

ti(M pab) < max ^(Mab^ab) + \\pab - Sa-.bII, nrr ^ < s + e. (102) 

p4| now follows easily from the protocol above. Given a protocol in QMA/locc^(0 with each 
proof of size m qubits, we can simulate it in QMAlocc^ (I — 1) as follows: The verifier asks for I — 1 
proofs, the first proof consisting of registers AB\ ■ ■ ■ B^, each of size m qubits and k = [8 In 2me~ 2 ~\ , 
and all the I — 2 other proofs in systems Cj (3 < j < I) of size m qubits. Then he symmetrises the 
B systems and traces out all of them except the first. Finally he applies the original measurement 
from the QMAlocc^ (0 protocol to the resulting state. 

The completeness of the protocol is unaffected by the simulation. For the soundness let 
PAB\ - B k ® Pc 3 ® • • • ® pci be an arbitrary state sent by the prover (after the symmetrisation step 
has been applied to B%, . . . , B m ). Let {M c i , I — M c i} e LOCC^ be the /-partite LOCC verification 
measurement from the QMAlocc^ (0 protocol (where for notational simplicity we define C\ = A, 
C 2 = Bi and C l = C x ■ ■ ■ Q). Then 

tr (M c i(p Cl c 2 ® PC 3 ® ■■■ ® PCt)) < max tv(M c ia c i) (103) 

<r c ieS Cl :...:0, 

+ min \\pdC 2 ® PCz ® • • • ® PCi ~ Oc l IIlocc^ 

= max tr(M c ia c i) (104) 
"( '■- ^<'\ •:<'.- 

+ mm \\pc\C 2 - 0"CiC 2 ||l0CC^ 

<rc 1 C 2 £Sc 1 -.C 2 

< s + e, (105) 

The equality in the second line follows since we can assume that the states pc 3 , • • • ,pc t belong to 
Alice and adding local states does not change the minimum one-way LOCC-distance to separable 
states. 

Since for going from QMAlocc^ (0 to QMAlocc^ {I — 1) we had to blow up one of the proof's 
size only by a quadratic factor, we can repeat the same protocol a constant number of times and 
still get each proof of polynomial size. In the end, the completeness parameter of the QMA proce- 
dure is the same as the original one for QMAlocc-* (J)/ while the soundness is smaller than s + le, 
which can be taken to be a constant away from c by choosing e sufficiently small. To reduce the 
soundness back to the original value s we then use the standard amplification procedure for QMA 
(see e.g. |60J), which works in this case since the verification measurement is LOCC (64). □ 
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